[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-developers] Mod_throttle question



Hi,

Seems I don't include to your httpd.conf next lines:
<Location /throttle-status>
SetHandler throttle-status
</Location>
to your main virtual host and

<Location /throttle-me>
SetHandler throttle-me
</Location>
in your clients virtual hosts.

My suggestion: don't use <Location /throttle-status> due to security
reason: anyone who know you use Throttle module and who looks into
documentation, for example - your hosting clients, will try default
throttle-status  and may open throttle-status page and reset theirs
statistics. For example, if you use Throttle module for bandwidth
control on clients web sites, they able to reset theirs data. Use more
complex Location, for example: 
<Location /admin/.my-server_statistic>
SetHandler throttle-status
</Location>
and your server status page will be available with
http://www.yourdomain.com/admin/.my-server_statistic

Regards,
Alexander Povargo
ALVO Business Solutions, Corp.
alpo@xxxxxxxxxxxxxxxxxx
http://www.yournewhosting.com
ICQ 25639843


> -----Original Message-----
> From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-
> admin@xxxxxxxxxxxxxxx] On Behalf Of Michele Neylon -Blacknight
Solutions
> Sent: Friday, August 09, 2002 5:16 AM
> To: cobalt-developers@xxxxxxxxxxxxxxx
> Subject: [cobalt-developers] Mod_throttle question
> 
> (I tried sending this earlier today, but it didn't seem to get
through)
> I'm not sure whether this is the right list to post the question, so
> excuse
> me in advance
> 
> I followed the instructions for installing mod_throttle posted at:
>
http://forum.rackshack.net/showthread.php?s=&threadid=7019&highlight=mod
th
> rottle
> 
> Apache is running fine and is reporting mod_throttle via its headers
> However if I try to access either the 'throttle-me' page for the
virtual
> site, or the general 'throttle-status' page for the server, I get a
404.
> Any ideas? Am I missing something really stupid and obvious??
> 
> Mr. Michele Neylon
> Blacknight Solutions - affordable linux hosting
> http://www.blacknightsolutions.com/
> 
> 
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers